Splunk Sizing Calculator

Estimate deterministic storage capacity and review a clearly separated infrastructure planning estimate.

● Calculated locally in your browser

Presets

Capacity inputs

Daily ingestion

Enter a value greater than zero.

Retention period

Enter at least one day.

Replication Factor

Search Factor

Growth buffer 25%

Environment

Capacity calculation

Recommended capacity

—

Raw ingest over retention —

Estimated indexed storage —

Replicated storage —

Growth buffer —

Ingest per day —

Splunk documentation uses ~50% of pre-indexed volume as a general planning estimate. Actual compression varies by data source and indexing configuration.

Infrastructure estimate Planning estimate

Indexers—

Search Heads—

Indexer and Search Head counts are planning estimates. Search concurrency, users, premium apps, hardware profile and clustering architecture can materially change requirements.

Planning estimates only. Actual Splunk architecture depends on workload, search concurrency, data model acceleration, hardware/cloud profile and Splunk architecture guidance.

What is Splunk sizing?

Splunk sizing connects daily ingest and retention requirements to storage capacity. This calculator keeps the deterministic capacity math separate from its workload-dependent infrastructure estimate.

Daily ingest

The volume indexed each day. Units use decimal conversion: 1,000 MB = 1 GB and 1,000 GB = 1 TB.

Retention

The number of days data is kept. Raw capacity is daily ingest multiplied by retention days.

Replication Factor

Replication Factor multiplies estimated indexed storage to represent bucket copies. The default 0.5 compression factor is a planning estimate, not a guarantee.